Advisories · Technology

IBM DataPower Gateway.

Every CVE that names IBM DataPower Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-40228 CVE record

CVSS 3.7 Low

IBM DataPower Gateway session fixation
- IBM DataPower Gateway
- Authentication bypass
Not analysed yet 22 Nov 2022
CVE-2022-31773 CVE record

CVSS 8.8 High

IBM DataPower Gateway: IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request…
- IBM DataPower Gateway
Not analysed yet 26 Aug 2022
CVE-2022-32750 CVE record

CVSS 5.4 Medium

IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0…
- IBM DataPower Gateway
Not analysed yet 31 Jul 2022
CVE-2022-31776 CVE record

CVSS 6.5 Medium

IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0…
- IBM DataPower Gateway
Not analysed yet 31 Jul 2022
CVE-2022-31775 CVE record

CVSS 5.5 Medium

IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0…
- IBM DataPower Gateway
Not analysed yet 31 Jul 2022
CVE-2022-31774 CVE record

CVSS 5.4 Medium

IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0…
- IBM DataPower Gateway
Not analysed yet 31 Jul 2022
CVE-2022-22326 CVE record

CVSS 4.0 Medium

IBM DataPower Gateway: IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5…
- IBM DataPower Gateway
Not analysed yet 31 Jul 2022
CVE-2021-38944 CVE record

CVSS 4.8 Medium

IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5…
- IBM DataPower Gateway
Not analysed yet 18 May 2022
CVE-2021-38872 CVE record

CVSS 5.3 Medium

IBM DataPower Gateway: IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4…
- IBM DataPower Gateway
Not analysed yet 17 May 2022
CVE-2020-4994 CVE record

CVSS 5.3 Medium

IBM DataPower Gateway: IBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could…
- IBM DataPower Gateway
Not analysed yet 17 May 2022
CVE-2021-38910 CVE record

CVSS 3.7 Low

IBM DataPower Gateway: IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass…
- IBM DataPower Gateway
Not analysed yet 10 Mar 2022
CVE-2020-4992 CVE record

CVSS 4.3 Medium

IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request…
- IBM DataPower Gateway
Not analysed yet 17 Aug 2021
CVE-2020-5008 CVE record

CVSS 3.7 Low

IBM DataPower Gateway: IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores…
- IBM DataPower Gateway
Not analysed yet 7 Jun 2021
CVE-2020-4831 CVE record

CVSS 5.9 Medium

IBM DataPower Gateway: IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic…
- IBM DataPower Gateway
Not analysed yet 12 Mar 2021
CVE-2020-5014 CVE record

CVSS 6.7 Medium

IBM DataPower Gateway: IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative…
- IBM DataPower Gateway
Not analysed yet 8 Mar 2021
CVE-2020-4528 CVE record

CVSS 5.9 Medium

IBM DataPower Gateway: IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12)…
- IBM DataPower Gateway
Not analysed yet 6 Oct 2020
CVE-2020-4581 CVE record

CVSS 7.5 High

IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to…
- IBM DataPower Gateway
Not analysed yet 21 Sept 2020
CVE-2020-4580 CVE record

CVSS 7.5 High

IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to…
- IBM DataPower Gateway
Not analysed yet 21 Sept 2020
CVE-2020-4579 CVE record

CVSS 7.5 High

IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to…
- IBM DataPower Gateway
Not analysed yet 21 Sept 2020
CVE-2020-4205 CVE record

CVSS 5.0 Medium

IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to…
- IBM DataPower Gateway
Not analysed yet 19 Mar 2020
CVE-2020-4203 CVE record

CVSS 4.9 Medium

IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly…
- IBM DataPower Gateway
Not analysed yet 19 Mar 2020
CVE-2019-4621 CVE record

CVSS 8.1 High

IBM DataPower Gateway: IBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a…
- IBM DataPower Gateway
Not analysed yet 9 Dec 2019
CVE-2019-4294 CVE record

CVSS 8.4 High

IBM MQ Appliance: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6…
- IBM MQ Appliance
- IBM DataPower Gateway
Not analysed yet 20 Aug 2019
CVE-2018-1666 CVE record

CVSS 4.3 Medium

IBM DataPower Gateway: IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18…
- IBM DataPower Gateway
Not analysed yet 7 Feb 2019
CVE-2018-1668 CVE record

CVSS 5.3 Medium

IBM DataPower Gateway: IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18…
- IBM DataPower Gateway
Not analysed yet 29 Jan 2019
CVE-2018-1665 CVE record

CVSS 5.9 Medium

IBM DataPower Gateway: IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17…
- IBM DataPower Gateway
Not analysed yet 13 Dec 2018